IPSec VPN uses symmetric keys to encrypt business data.

Question

Options

• ATrue
• BFalse

• A
  75% (21)
• B
  25% (7)

Explanation

A is correct because IPSec encrypts the actual data payload (business traffic) using symmetric-key algorithms such as AES or 3DES. Symmetric encryption is used for bulk data because it is computationally far faster than asymmetric encryption, making it practical for high-volume VPN traffic.

B is wrong because while IPSec does use asymmetric cryptography during the IKE (Internet Key Exchange) handshake to securely negotiate and share the session key, that is the key exchange phase - not the data encryption phase. Once the session key is established, all business data flows under symmetric encryption.

Memory tip: Think of it as a two-step lock: asymmetric crypto is the "locksmith" that securely delivers the key, and symmetric crypto is the "lock" that actually protects the data. The exam question asks about the lock, not the locksmith - and that lock is always symmetric.

No community discussion yet for this question.